This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
File:                     1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json)
Hash identifier:          7sTVWQ3GAn0nq1wCJj3kookimNHek82/ojHE68ragLk=
Subject key identifier:   A2:58:79:9A:47:32:3E:2F:7F:84:1C:98:CB:09:6A:48:7A:04:C3:F9
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Certificate issuer:       /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial:       019BF3BD68219BF88B6D35A7A2EEA6D4F493
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
Manifest number:          17F4
Signing time:             Sun 25 Jan 2026 06:00:34 +0000
Manifest this update:     Sun 25 Jan 2026 06:00:34 +0000
Manifest next update:     Mon 26 Jan 2026 06:00:34 +0000
Files and hashes:         1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=)
                          2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: k2aF16BmIWX/vgFQ/WqT4V/1dfCr4lRUfE+XoNz7oAc=)
                          3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=)
                          4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=)
                          5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=)
                          6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=)
                          7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=)
                          8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=)
                          9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=)
                          10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=)
                          11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=)
                          12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=)
                          13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=)
                          14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=)
                          15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=)
                          16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=)
                          17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=)
                          18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=)
                          19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Jan 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:f3:bd:68:21:9b:f8:8b:6d:35:a7:a2:ee:a6:d4:f4:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
        Validity
            Not Before: Jan 25 06:00:34 2026 GMT
            Not After : Jan 26 06:00:34 2026 GMT
        Subject: CN=a258799a47323e2f7f841c98cb096a487a04c3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:48:8f:be:e9:5e:db:3f:0f:41:56:4b:2d:30:
                    1c:bb:c8:24:e9:42:93:ea:15:32:e7:d0:23:45:c9:
                    1a:83:ff:71:53:de:94:60:a6:52:8b:8c:be:59:93:
                    c4:64:32:10:b4:00:cf:25:f8:2a:87:e4:b0:6e:ff:
                    6a:b8:ab:ac:f9:2d:a3:f2:e1:2c:64:73:02:d0:80:
                    5e:64:89:98:59:40:84:3d:67:ec:7e:ad:ff:40:7c:
                    6a:77:a9:66:44:ab:91:c8:e1:3f:19:b8:92:4d:f1:
                    02:70:03:5f:f4:91:b3:09:ac:e8:1c:24:4e:2b:e7:
                    6e:9e:3c:67:8b:ed:a1:2b:92:7f:f7:ff:5d:d6:c3:
                    59:47:0f:e6:0d:3e:57:5b:31:aa:30:ad:47:8c:16:
                    f8:0a:76:85:3a:55:f5:72:c3:44:2a:ba:54:dc:4f:
                    dd:34:6a:3e:9b:e5:98:ca:0e:b1:f9:d8:ad:11:c4:
                    20:3c:54:4d:23:82:2b:f4:09:41:3c:1c:b5:53:4c:
                    e2:22:16:ef:9f:3e:b6:eb:f5:aa:77:31:90:b5:92:
                    4a:85:aa:05:14:e6:bc:8c:67:54:35:36:f8:a2:98:
                    01:fe:02:be:27:78:b0:2f:e7:b0:eb:50:bb:b6:7c:
                    a3:07:12:ee:84:4f:4d:54:ba:87:e7:28:14:e5:47:
                    a4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:58:79:9A:47:32:3E:2F:7F:84:1C:98:CB:09:6A:48:7A:04:C3:F9
            X509v3 Authority Key Identifier:
                keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:08:23:d8:61:56:19:ad:50:cc:26:2c:be:3e:54:94:d3:53:
         91:30:f3:12:66:2b:e3:7a:3b:77:5f:ef:f1:22:ba:1c:59:82:
         ee:50:a3:28:d6:7f:28:b5:08:f3:3b:cc:aa:56:33:36:2f:ee:
         8a:9e:7d:a4:fb:98:b3:c6:8d:db:8b:55:01:31:fd:93:bf:6a:
         d6:05:46:61:31:57:aa:d4:07:c0:a2:a0:82:a4:b7:a8:4b:11:
         5d:88:de:56:4b:91:89:67:dd:8c:08:55:07:d2:a3:50:b8:63:
         fe:53:9f:08:2b:b2:a4:20:31:01:b5:00:c0:82:ea:b3:55:e4:
         c5:ea:ca:d6:e3:10:b5:8c:6c:fc:19:5b:99:94:84:f9:15:8c:
         16:f1:dc:57:e8:59:45:d6:c4:b1:7e:f7:07:42:4b:85:da:d4:
         49:1a:cc:3a:05:d7:78:d4:4e:7b:a7:f9:b0:c0:7c:b5:36:c3:
         c6:76:ed:9c:19:40:8c:b0:f8:2a:64:85:8e:c0:cc:a5:c3:29:
         ad:90:04:dc:b1:20:28:66:7d:60:8b:bd:01:66:06:bf:17:da:
         62:68:dd:1f:be:76:bc:b3:12:59:0d:cc:7d:c2:f4:25:cc:c3:
         44:53:70:92:87:30:4b:78:be:f4:89:09:6d:75:79:7c:9f:83:
         a9:11:c4:c7
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZvzvWghm/iLbTWnou6m1PSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm
NDYyZWEwHhcNMjYwMTI1MDYwMDM0WhcNMjYwMTI2MDYwMDM0WjAzMTEwLwYDVQQD
EyhhMjU4Nzk5YTQ3MzIzZTJmN2Y4NDFjOThjYjA5NmE0ODdhMDRjM2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6kiPvule2z8PQVZLLTAcu8gk6UKT
6hUy59AjRckag/9xU96UYKZSi4y+WZPEZDIQtADPJfgqh+Swbv9quKus+S2j8uEs
ZHMC0IBeZImYWUCEPWfsfq3/QHxqd6lmRKuRyOE/GbiSTfECcANf9JGzCazoHCRO
K+dunjxni+2hK5J/9/9d1sNZRw/mDT5XWzGqMK1HjBb4CnaFOlX1csNEKrpU3E/d
NGo+m+WYyg6x+ditEcQgPFRNI4Ir9AlBPBy1U0ziIhbvnz626/WqdzGQtZJKhaoF
FOa8jGdUNTb4opgB/gK+J3iwL+ew61C7tnyjBxLuhE9NVLqH5ygU5UekIQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKJYeZpHMj4vf4QcmMsJakh6BMP5MB8GA1UdIwQY
MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw
LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3
YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUAgj
2GFWGa1QzCYsvj5UlNNTkTDzEmYr43o7d1/v8SK6HFmC7lCjKNZ/KLUI8zvMqlYz
Ni/uip59pPuYs8aN24tVATH9k79q1gVGYTFXqtQHwKKggqS3qEsRXYjeVkuRiWfd
jAhVB9KjULhj/lOfCCuypCAxAbUAwILqs1XkxerK1uMQtYxs/BlbmZSE+RWMFvHc
V+hZRdbEsX73B0JLhdrUSRrMOgXXeNROe6f5sMB8tTbDxnbtnBlAjLD4KmSFjsDM
pcMprZAE3LEgKGZ9YIu9AWYGvxfaYmjdH752vLMSWQ3MfcL0JczDRFNwkocwS3i+
9IkJbXV5fJ+DqRHExw==
-----END CERTIFICATE-----
Generated at Sun Jan 25 16:30:30 2026 by rpki-client